Identity Security Architect

Network Security Architect Ideal Candidate : Senior Network Security Architect + strong enterprise networking/security architecture + hands-on PQC knowledge (FIPS 203/204/205) + experience assessing PQC readiness and its impact on Firewalls, WAF, NAC, Proxy, VPN/PKI and perimeter security. Role Overview We are looking for a Senior Network Security Architect who can design and secure large enterprise network environments across on-prem, data center, and multi-cloud platforms . The most important differentiator for this role is Post-Quantum Cryptography (PQC) expertise, specifically NIST FIPS 203, FIPS 204, and FIPS 205 , and how PQC impacts network security technologies. Critical Must-Haves 1. Post-Quantum Cryptography Key Requirement

Strong understanding of NIST PQC standards: FIPS 203, 204, and 205 . Experience assessing or planning PQC readiness within enterprise environments. Understanding of the "Harvest Now, Decrypt Later" threat. Ability to assess the impact of PQC on: Firewalls / NGFW Web Application Security Network Access Control (NAC) Proxy infrastructure Perimeter/Email Security VPN and encryption technologies PKI / certificates Ability to provide recommendations for PQC migration and cryptographic modernization .

8+ years of enterprise networking experience. 3+ years in Network/Cybersecurity Architecture . Strong knowledge of: LAN/WAN BGP, MPLS, IP Routing SD-WAN VPN Data Center Networking Zero Trust Architecture Network segmentation / secure zoning Experience designing security architecture using NGFW, IDS/IPS and NAC .

Hands-on experience with one or more of: Palo Alto Cisco Check Point SIEM EDR Proxy Web Application Security NAC PKI MFA / SSO

securing network environments in: AWS Azure Google Cloud Platform Must understand cloud network perimeters, connectivity, segmentation and secure integration with enterprise/on-prem networks.

Experience performing security assessments, gap analysis and vulnerability assessments . Familiarity with NIST, CIS and SANS frameworks. Financial-services regulatory knowledge is highly relevant, especially: FFIEC DORA SEC cybersecurity guidance Ability to incorporate security/compliance requirements into architecture recommendations and RFP deliverables.

Python or PowerShell scripting for network/security automation is preferred.

• Assess the existing network/security architecture.
• Identify security and cryptographic gaps.
• Design secure enterprise and cloud network architectures.
• Develop PQC readiness and migration recommendations .
• Evaluate the impact of PQC on existing security technologies.
• Support RFPs, technical evaluations and architecture decisions.
• Work with security engineers, project managers and senior stakeholders.
• Provide guidance during major security incidents and post-incident reviews.

CISSP / CISSP-ISSAP CCIE / CCDP CISM SABSA

For applications and inquiries, contact:View email address on us.fitly.work